Cybersecurity Data Protection Engineer

This is a hands-on security position working within the Information Security group and with the internal IT department  role's core focus is to ensure consistent, measurable end-to-end delivery of security services, developing and deploying capabilities so that enterprise systems and data are protected with the security controls and tools required to meet policy and compliance requirements. The postholder is responsible for designing, implementing and managing Data Protection and Data Security solutions in support of the CAA data protection programme, with a primary focus on safeguarding structured and unstructured data stored across SaaS applications, cloud storage solutions and custom-developed applications.

• Develop a comprehensive plan for the management of structured and unstructured data in an enterprise environment, with a focus on business enablement.
• Partner across technology teams to create practical best practices for the implementation of Microsoft Purview solutions, including Data Loss Prevention, Data Security Posture Management, Information Protection, Insider Risk Management and Data Lifecycle Management.
• Conduct data discovery, classification and risk assessment across managed data repositories, including One Drive, SharePoint, SaaS and custom-developed solutions storing company data.
• Integrate data protection controls with security and workflow toolsets such as SIEM, EDR and Service Now/JIRA.
• Configure, deploy and manage Endpoint DLP policies to prevent or monitor data exfiltration across company devices and BYOD.
• Partner with business groups to review workflows and produce output that enhances security processes in support of those workflows.
• Ensure that identified security considerations are implemented and that solutions are configured securely.
• Coordinate with IRM leadership to develop and deliver key security metrics, ensuring technical security controls meet desired objectives and that CAA's technical controls are measurably effective.

• A minimum of 6 years in Information Technology.
• A minimum of 3 years' experience in data protection, Data Loss Prevention or information security engineering.
• Experience in an enterprise environment with exposure to broader technology and business teams.
• A Bachelor's or Master's degree in a relevant field of work.
• Proven experience with Microsoft data security and data compliance technologies.
• Strong analytical skills in conducting due diligence to identify, assess and prioritise data-related risks.
• Familiarity with information security frameworks (NIST, ISO 27001), data privacy regulations (GDPR, CCPA) and information security certifications/attestations (SOC, ISO, PCI DSS, FedRAMP).
• A strong understanding of the fundamental operations of servers, operating systems, cloud applications and infrastructure.
• Hands-on experience with one or more of: DLP (e.g. Microsoft Purview, Crowd Strike), DSPM/SSPM platforms, or cloud security (AWS, Azure, GCP).
• Strong understanding of data protection techniques (encryption, tokenisation, masking), identity and access management principles, and API security and modern application architectures.
• Experience integrating security tooling with SIEM/SOAR platforms.
• Scripting/programming experience (e.g. Python, Power Shell or similar).

• Certifications such as CISSP, CISA/CISM or Microsoft Certified Information Protection Administration are preferred, but not required.
• Deep expertise in Microsoft's data security ecosystem, including Microsoft Purview, Endpoint DLP and adjacent data security solutions.
• A passion for cybersecurity, threat detection, risk mitigation and response.

• Hybrid working arrangement.

• Eligibility…